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DETAILED ACTION 

1. Applicant's amendment filed on Sep. 19, 2007 has been entered. Claims 1-58 
are pending. Claims 1,17, 30 and 46 are amended by the applicant. 

2. The Office would like to notify the Applicant that there has been a change in 
Examiner to conduct the future examination and prosecution processes of the currently 
pending application. 

Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

3. Claims 30-58 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. 

Claim 30 recites, "For a system for processing data and a computer readable 
medium containing program instructions for execution by a computer for performing the 
method for processing....". The claimed computer-readable medium carrying a compute 
program without creating any functional interrelationship, either as part of the stored 
data or as part of the computing processes performed by the computer. The computer 
programs claimed as computer listings "per se" that is, the descriptions or expression of 
programs, are not physical "things". They are neither computer components nor 
statutory processes, as they are not "acts" being performed. Such claimed computer 
programs do not define any structural and functional interrelationships between the 
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computer program and other claimed elements of a computer which permit the 
computer program's functionality to be realized. Therefore, claim 30 recites non- 
statutory subject matter. 

Claims 31-45 depend on claim 30, therefore they are rejected with the same 
rationale applied against claim 30 above. 

Claim 46 has limitation that are similar to those of claim 30, thus it is rejected with 
the same rationale applied against claim 30 above. 

Claims 47-58 depend on claim 46, therefore they are rejected with the same 
rationale applied against claim 46 above. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1, 17, 21, 25, 30, 46, 50 and 54 are rejected under 35 U.S.C. 103(a) as 

being unpatentable over Dulude et al. (US Patent No. 6,310,966) and in view Epstein 

(US Pub. No. 2002/0124176). 

As per claim 1 , Dulude teaches: 

receiving a first 'biometric data and a first personal key; processing the first biometric 
data combined with the first personal key through an irreversible cryptographic 
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algorithm to form a fist processed data [Fig. 4, col. 6 lines 1-5, col. 5 lines 52-62]; 
receiving a second biometric data and a second personal key; processing the second 
biometric data combined with the second personal key through the irreversible 
cryptographic algorithm to form a second processed data [Fig. 5, col. 7 lines 7-14]; 
comparing the second processed data to the first processed data, without accessing the 
fist and second processed data in an unprocessed form in order to enable 
authentication of first and second biometric data and personal keys in a confidential 
manner [Fig. 5, col. 7 lines 15-18]; and generating a signal pertaining to the comparison 
of the second processed data to the first processed data for use in an authentication 
process [Fig. 5, col. 7 lines 18-20]. 
Epstein teaches: 

eliminating all storage or trace the first and second biometric data and personal keys in 
an unprocessed form [Fig. 4 paragraph 0029 lines 6-12]. 

Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the invention was made to combine Epstein with Dulude, since one would have been 
motivated to provide biometric authentication and access security [Epstein, paragraph 
0008 lines 1-3]. 



As per claim 17 , it encompasses limitations that are similar to limitations of claim 1. 
Thus, it is rejected with the same rationale applied against claim 1 above. 
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As per claim 21 , the method of claim 17 wherein receiving the biometric data and the 
personal key occurs during an authentication process (Rejected per claim 1). 



As per claim 25 , the method of claim 17 further comprising generating a signal 
corresponding to the comparison of the processed data to the secondary data (Rejected 
per claim 1). 

As per claim 30 , it encompasses limitations that are similar to limitations of claim 1. 
Thus, it is rejected with the same rationale applied against claim 1 above. 

As per claim 46 , it encompasses limitations that are similar to limitations of claim 1. 
Thus, it is rejected with the same rationale applied against claim 1 above. 

As per claim 50 , The computer readable medium for performing the method of claim 46 
wherein receiving the biometric data and the personal key occurs during an 
authentication process. (Rejected per claim 21.) 



As per claim 54 , The computer readable medium for performing the method of claim 46 
further comprising generating a signal corresponding to the comparison of the 
processed data to the secondary data. (Rejected per claim 25.) 
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5. Claims 2-16, 18-20, 22-24, 26-29, 31-45, 47-49, 51-53, 55-58 are rejected under 
35 U.S.C. 103(a) as being unpatentable over Dulude et al. (US Patent No. 6,310,966) 
and in view Epstein (US Pub. No. 2002/0124176) and in view of Musgrave et al. (US 
Patent No. 6,202,151). 

As per claim 2 , the rejection of claim 1 is incorporated and Musgrave teaches: 
generating a first variant from the first biometric data prior to processing the first 
biometric data and the first personal key through the irreversible cryptographic 
algorithm. (Column 5, lines 15-19. The Examiner is interpreting concatenating the 
biometric with other data as to form a Variant.') 

Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the invention was made to combine Musgrave with Dulude and Epstein, since one 
would have been motivated to provide increased security and accuracy for 
authentication of electronic transaction [Musgrave, col. 3 lines 25-28]. 

As per claim 3 , the rejection of claim 1 is incorporated and Musgrave teaches: 
generating a second variant from the second biometric data prior to processing the 
second biometric data and the second personal key through the irreversible 
cryptographic algorithm. (Column 5, lines 15-19 and Column 3, lines 54-57.) 



As per claim 4 , the rejection of claim 1 is incorporated and Musgrave teaches: 
processing the first biometric data through a secondary irreversible cryptographic 
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algorithm prior to processing the first biometric data and the second biometric data 
through the irreversible cryptographic algorithm. (Column 3, lines 37-39) 

As per claim 5 , the rejection of claim 1 is incorporated and Musgrave teaches: adding 
salt to the first biometric data and the first personal key. (Figure 3, block 28. Musgrave 
et al. present a 'addition data to pad... [other] combined data,' per paragraph 15 of the 
applicant's specification. The Examiner is interpreting "User Input Data" given through 
device 28 as 'pad data' to pad 'Combined Data' that is biometric and public key data, as 
presented in both the reference and instant application.) 

As per claim 6 , the rejection of claim 1 is incorporated and Musgrave teaches: 
processing the first personal key through a cryptographic algorithm prior to processing 
the first biometric data and the first personal key through the irreversible cryptographic 
algorithm. (Figure 3, blocks 32 and 34. The public key is processed with other data 
through the cryptographic hash algorithm 34.) 

As per claim 7 , the rejection of claim 1 is incorporated and Musgrave teaches: 
associating a first primary key to the first processed data. (Column 5, lines 45-60 and 
Column 6, lines 52-60. The Examiner is interpreting 'primary key' to be 'any personal 
inputted data' per paragraph 15 of the applicant's specification (e.g., a user inputted 
string). Therefore, one of the datum received in Musgrave et al., per block 28 of Figure 
3, is a 'primary key.') 
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As per claim 8 , the rejection of claim 1 is incorporated and Musgrave teaches: 
associating a second primary key to the second processed data. (Figure 3, block 36. 
Please note that the first set of data (primary key, personal key and biometric) in 
Musgrave et al. corresponds the second set of data in the instant application (e.g., 
enrollment data (all) is the "first" data in the instant application, but is called "second" in 
Musgrave et al.). Therefore, based on paragraph 8 of column 6, Figure 3, block 36 
corresponds to both 1 st and 2 nd datum.) 

As per claim 9 , the rejection of claim 1 is incorporated and Musgrave teaches: receiving 
the first bipmetric data and the first personal key occurs during an enrollment process. 
(Column 6, lines 52-60.) 

As per claim 10 , the rejection of claim 1 is incorporated and Musgrave teaches: 
receiving the second biometric data and the second personal key occurs during an 
authentication process. (Column 3, lines 57-60.) 

As per claim 11 / the rejection of claim 1 is incorporated and Musgrave teaches: 
generating a signal includes issuing a confirmation signal when the second processed 
data matches the first processed data. (Column 3, lines 49-63.) 
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As per claim 12 , the rejection of claim 11 is incorporated and Musgrave teaches: 
issuing a confirmation signal allows access to a facility. (Column 6, lines 5-17.) 

As per claim 13 , the rejection of claim 11 is incorporated and Musgrave teaches: 
issuing a confirmation signal allows access to a system. (Column 6, lines 5-17.) 

As per claim 14 , the rejection of claim 1 is incorporated and Musgrave teaches: 
generating a signal includes issuing a rejection signal when the second processed data 
does not match the first processed data. (Column 3, lines 49-63.) 

As per claim 15 , the rejection of claim 1 is incorporated and Musgrave teaches: storing 
the first processed data in a database. (Column 3, lines 49-63.) 

As per claim 16 , the rejection of claim 15 is incorporated and Musgrave teaches: the 
database includes a plurality of first processed data. (Column 3, lines 49-63.) 

As per claim 18 , the method of claim 17 further comprising generating a variant from the 
biometric data prior to processing the biometric data and the personal key through the 
irreversible cryptographic algorithm (Rejected per claim 3). 
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As per claim 19 , the method of claim 17 further comprising processing the biometric 
data through a secondary irreversible cryptographic algorithm prior to processing the 
biometric data and the personal key through the irreversible cryptographic algorithm 
(Rejected per claim 4). 

As per claim 20 , the method of claim 17 further comprising adding salt to the biometric 
data and the personal key prior to processing the biometric data and the personal key 
through the irreversible cryptographic algorithm (Rejected per claim 5). 

As per claim 22 , the method of claim 17 further comprising associating a primary key 
with the biometric data and the personal key (Rejected per claim 8). 

As per claim 23 , the method of claim 17 wherein the secondary data includes a 
secondary biometric data and a secondary personal key (Rejected per claim 1 and 
including the reasoning of claim 7). 



As per claim 24 , the method of claim 23 wherein the secondary biometric data and the 
secondary personal key is received during an enrollment process (Rejected per claim 
23). 
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As per claim 26 , the method of claim 25 wherein generating a signal includes issuing a 
confirmation message when the processed data matches at least a portion of secondary 
data (Rejected per claim 11). 

As per claim 27 , the method of claim 25 wherein generating a signal includes issuing a 
denial message when the processed data does not match at least a portion of 
secondary data (Rejected per claim 14). 

As per claim 28 , the method of claim 25 wherein generating a signal allows entry into a 
facility when the processed data matches the secondary data (Rejected per claim 12). 

As per claim 29 , the method of claim 25 wherein generating a signal allows entry into a 
system when the processed data matches the secondary data (Rejected per claim 13). 

As per claim 31 The computer readable medium for performing the method of claim 30 
further comprising generating a first variant from the first biometric data prior to 
processing the first biometric data and the first personal key through the irreversible 
cryptographic algorithm. (Rejected per claim 2.) 



As per claim 32 , The computer readable medium for performing the method of claim 30 
further comprising generating a second variant from the second biometric data prior to 
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processing the second biometric data and the second personal key through the 
irreversible cryptographic algorithm. (Rejected per claim 3.) 

As per claim 33 , The computer readable medium for performing the method of claim 30 
further comprising processing the first- biometric data through a secondary irreversible 
cryptographic algorithm prior to processing the first biometric data and the second 
biometric data through the irreversible cryptographic algorithm. (Rejected per claim 4.) 

As per claim 34 , The computer readable medium for performing the method of claim 30 
further comprising adding salt to the first biometric data and the first personal key prior 
to processing the first biometric data and the second biometric data through the 
irreversible cryptographic algorithm. (Rejected per claim 5.) 

As per claim 35 , The computer readable medium for performing the method of claim 30 
further comprising processing the first personal key through a reversible cryptographic 
algorithm prior to processing the first biometric data and the first personal key through 
the irreversible cryptographic algorithm. (Rejected per claim 6.) 

As per claim 36 , The computer readable medium for performing the method of claim 30 
further comprising associating a first primary key to the first processed data. (Rejected 
per claim 7.) 
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As per claim 37 . The computer readable medium for performing the method of claim 30 
further comprising associating a second primary key to the second processed data. 
(Rejected per claim 8.) 

As per claim 38 , The computer readable medium for performing the method of claim 30 
wherein receiving the first biometric data and the first personal key occurs during an 
enrollment process. (Rejected per claim 9.) 

As per claim 39 . The computer readable medium for performing the method of claim 30 
wherein receiving the second biometric data and the second personal key occurs during 
an authentication process. (Rejected per claim 10.) 

As per claim 40 , The computer readable medium for performing the method of claim 30 
wherein generating a signal includes issuing a confirmation signal when the second 
processed data matches the first processed data. (Rejected per claim 1 1 .) 

As per claim 41 . The computer readable medium for performing the method of claim 40 
wherein issuing a confirmation signal allows access to a facility. (Rejected per claim 
12.) 

As per claim 42 , The computer readable medium for performing the method of claim 40 
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wherein issuing a confirmation signal allows access to a system. (Rejected per claim 
13.) 

As per claim 43 , The computer readable medium for performing the method of claim 30 
wherein generating a signal includes issuing a rejection signal when the second 
processed data does not match the first processed data. (Rejected per claim 14.) 

As per claim 44 , The computer readable medium for performing the method of claim 30 
further comprising storing the first processed data in a database. (Rejected per claim 

15. ) 

As per claim 45 , The computer readable medium for performing the method of claim 44 
wherein the database includes a plurality of first processed data. (Rejected per claim 

16. ) 

As per claim 47 , The computer readable medium for performing the method of claim 46 
further comprising generating a variant from the biometric data prior to processing the 
biometric data and the personal key through the irreversible cryptographic algorithm. 
(Rejected per claim 18.) 

As per claim 48 , The computer readable medium for performing the method of claim 46 
further comprising processing the biometric data through a secondary irreversible 
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cryptographic algorithm prior to processing the biometric data and the personal key 
through the irreversible cryptographic algorithm. (Rejected per claim 19.) 

As per claim 49 , The computer readable medium for performing the method of claim 46 
further comprising adding salt to the biometric data and the personal key prior to 
processing the biometric data and the personal key through the irreversible 
cryptographic algorithm. (Rejected per claim 20.) 

As per claim 51 , The computer readable medium for performing the method of claim 46 
further comprising associating a primary key with the biometric data and the personal 
key. (Rejected per claim 22.) 

As per claim 52 , The computer readable medium for performing the method of claim 46 
wherein the secondary data includes a secondary biometric data and a secondary 
personal key. (Rejected per claim 23.) 

As per claim 53 , The computer readable medium for performing the method of claim 52 
wherein the secondary biometric data and the secondary personal key is received 
during an enrollment process. (Rejected per claim 24.) 



As per claim 55 , The computer readable medium for performing the method of claim 54 
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wherein generating a signal includes issuing a confirmation message when the 
processed data matches at least a portion of secondary data. (Rejected per claim 26.) 

As per claim 56 , The computer readable medium for performing the method of claim 54 
wherein generating a signal includes issuing a denial message when the processed 
data does not match at least a portion of secondary data. (Rejected per claim 27.) 

As per claim 57 , The computer readable medium for performing the method of claim 54 
wherein generating a signal allows entry into a facility when the processed data 
matches the secondary data. (Rejected per claim 28.) 

As per claim 58 , The computer readable medium for performing the method of claim 54 
wherein generating a signal allows entry into a system when the processed data 
matches the secondary data. (Rejected per claim 29.) 

Response to Amendment 

6. Applicant has amended claims 1, 17, 30 and 46 which necessitated new ground 
of rejection. See rejection above. 

Regarding to the Applicant's argument to the 35 USC § 101 rejections, Examiner 
maintains the 35 USC § 101 rejection for claims 30-58. See 35 U.S.C. 101 rejection 
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above. The independent claims 30 and 46, recite Tor a system for processing data and 
a computer readable medium containing program instructions for execution by a 
computer for performing the method for processing....". The claimed computer-readable 
medium carrying a compute program without creating any functional interrelationship, 
either as part of the stored data or as part of the computing processes performed by the 
computer. The computer programs claimed as computer listings "per se" that is, the 
descriptions or expression of programs, are not physical "things". They are neither 
computer components nor statutory processes, as they are not "acts" being performed. 
Claim limitations still do not provide an explicit (inter) relationship between the computer 
readable media having computer executable instructions and a technological art, 
environment or machine that is required for the claims to be statutory. That is, the 
claimed limitation needs to explicitly show functional relationship between the stored 
executable instructions and a computer as part of the computing process performed by 
the computer. 

Conclusion 

7. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to Nirav Patel whose telephone number is 571- 

272- 5936. If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached on 571-272-3859. The fax and phone 
numbers for the organization where this application or proceeding is assigned is 571- 

273- 8300. Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 571-272- 
2100. 



NBP 

11/28/07 




